Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft
File:                     1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft (raw, json)
Hash identifier:          E6km3S35KvXUJtHqQy5CoSC/9Q0zCT8j/bOT3KkX18E=
Subject key identifier:   71:4A:34:E2:88:E4:25:33:9F:D8:58:37:68:2A:29:50:50:0A:44:9B
Authority key identifier: F8:45:62:92:D8:5A:0B:86:C4:E2:53:4B:27:D2:6B:47:BF:E0:43:17
Certificate issuer:       /CN=f8456292d85a0b86c4e2534b27d26b47bfe04317
Certificate serial:       01969D879125F0F14A1BEE41A6E75E37D151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft
Manifest number:          0B2B
Signing time:             Sun 04 May 2025 23:00:29 +0000
Manifest this update:     Sun 04 May 2025 23:00:29 +0000
Manifest next update:     Mon 05 May 2025 23:00:29 +0000
Files and hashes:         1: 1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl (hash: zBt+Dcf4gdd5vGqAOKZ5TfvwSNV9/AJkvIo9UrlfKEE=)
                          2: Ye-1b3Oqv586dqfuogOZnzwmKao.roa (hash: M9y1SazElcLTZkq2/3rTLHzloUqVKkD3eSc9q5agDu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:87:91:25:f0:f1:4a:1b:ee:41:a6:e7:5e:37:d1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8456292d85a0b86c4e2534b27d26b47bfe04317
        Validity
            Not Before: May  4 23:00:29 2025 GMT
            Not After : May  5 23:00:29 2025 GMT
        Subject: CN=714a34e288e425339fd85837682a2950500a449b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:b9:1d:62:98:e5:df:d3:f5:c8:69:39:3e:
                    2e:67:41:08:09:16:b9:5a:8e:d6:d7:b7:44:42:b0:
                    2f:0b:dd:da:f3:d6:56:a1:39:e6:7b:49:58:e8:95:
                    1b:97:7a:43:4a:4f:48:1b:0f:eb:39:93:9f:17:9c:
                    29:e1:7d:71:82:3d:eb:af:e7:9d:ba:46:5d:68:b6:
                    1c:24:1e:0d:e0:7e:b8:f4:90:76:06:d3:68:bc:7e:
                    d4:e3:3b:88:58:0a:47:91:b4:8b:b4:d3:f0:73:08:
                    7b:90:d0:b7:ea:2d:52:c1:03:c2:95:c6:b6:40:0d:
                    a9:17:50:5c:7f:f5:9f:7c:e4:8e:b1:0a:e3:4e:41:
                    ff:23:84:b8:c5:d2:de:4a:d0:6e:37:3c:c0:36:ba:
                    85:fe:59:94:c0:13:5e:d0:3d:54:3e:a7:cf:3e:bd:
                    7e:8c:25:4e:fb:b0:8a:d7:cc:ed:5e:22:d9:33:05:
                    20:9e:bf:a8:28:5d:f8:78:64:3c:73:01:9f:77:f3:
                    f9:4c:ee:96:6c:5d:88:37:51:ef:a1:ce:7d:68:d7:
                    36:9d:ee:1c:84:2f:ff:94:43:f5:c1:0b:ff:0c:54:
                    89:6e:bb:c5:89:3f:0c:31:6c:bd:14:92:96:4b:d5:
                    40:8b:71:1a:09:df:a4:71:39:81:7b:77:52:7b:7f:
                    55:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4A:34:E2:88:E4:25:33:9F:D8:58:37:68:2A:29:50:50:0A:44:9B
            X509v3 Authority Key Identifier:
                keyid:F8:45:62:92:D8:5A:0B:86:C4:E2:53:4B:27:D2:6B:47:BF:E0:43:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:0b:c2:4f:06:82:bf:73:fe:4a:b0:12:0c:73:b3:e7:7a:f3:
         3a:80:5d:b1:18:43:c6:55:9c:07:0d:e5:a1:1f:d4:da:71:b2:
         78:01:60:1c:e1:c5:9f:15:4a:af:9e:8d:92:11:8c:89:c8:a9:
         29:da:e7:26:8e:14:ac:b2:03:89:3d:5f:4f:c5:d1:3c:b2:de:
         b0:7a:97:76:46:f9:21:ee:39:d5:e4:48:fe:3a:e2:97:7e:5e:
         84:4c:2b:03:43:4a:06:2a:b2:b9:12:fa:7f:c0:dc:23:5d:36:
         2d:ca:b9:a9:41:f8:aa:70:86:45:64:3b:7d:e1:df:04:75:5f:
         a8:07:76:9f:10:d8:bd:98:2d:55:0e:5e:1b:a5:39:71:a9:90:
         70:d3:fb:22:3f:63:15:2a:eb:3a:c8:7d:01:dd:ea:d6:8a:11:
         e9:40:46:af:76:28:f5:06:4e:67:82:23:d2:a8:f0:f8:12:e3:
         59:a7:6f:36:2e:cb:a3:a1:ec:72:99:f0:65:96:72:41:c5:d6:
         9a:0a:7a:e1:af:7a:51:76:4e:61:cb:df:bb:f7:0b:9a:85:a7:
         fd:da:5c:94:51:19:11:53:9c:19:d1:7e:90:b4:33:36:04:5d:
         2a:13:05:15:98:b8:5a:48:fd:a4:d1:2c:75:50:e6:ab:73:79:
         ec:08:4b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:43:16 2025 by rpki-client